Search Vulnerabilities

BaseCookie.js_output() does not neutralize embedded characters

MuPDF < 1.27 mutool ANSI Injection via Metadata

Microsoft Power Apps Spoofing Vulnerability

OpenClaw 2026.2.13 < 2026.3.25 - ANSI Escape Sequence Injection in Approval Prompt

Terminal Escape Injection in mmctl Report Posts Command

QuRouter

Inspektor Gadget uses unsanitized ANSI Escape Sequences In `columns` Output Mode

Tanium addressed an unauthorized code execution vulnerability in Tanium Appliance.

Word Copilot Information Disclosure Vulnerability

Mailpit has SMTP Header Injection via Regex Bypass

badkeys vulnerable to ASCII control character injection on console via malformed input

Apache HTTP Server: CGI environment variable override

Soft Serve does not sanitize ANSI escape sequences in user input

Apache Tomcat: console manipulation via escape sequences in log messages

Tracing logging user input may result in poisoning logs with ANSI escape sequences

Active Record logging vulnerable to ANSI escape injection

Apache HTTP Server: mod_ssl error log variable escaping

Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation

In netstat in BusyBox through 1

gurk (aka gurk-rs) through 0